Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

Security Advisories: GSA_kwCzR0hTQS1wcDg0LXYzbXctZ2c0d84AA--l

Taipy 3.1.1 affected by CVEs on flask-core and pymongo

Summary

CVEs on latest 3.1.1

Details

SECURITY ISSUES

CVE-2024-1681: flask-core <4.0.1

latest version of taipi 3.1.1 needs <=4.0.0

CVE-2024-5629: pymongo <4.6.3

#latest version of taipi 3.1.1 needs <=4.6.1

PoC

please upgrade to these versions

Impact

pre-commit breaks

Permalink: https://github.com/advisories/GHSA-pp84-v3mw-gg4w
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wcDg0LXYzbXctZ2c0d84AA--l
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: 11 days ago
Updated: 11 days ago

Identifiers: GHSA-pp84-v3mw-gg4w
References:

Repository: https://github.com/Avaiga/taipy
Blast Radius: 0.0

Affected Packages

pypi:taipy

Dependent packages: 2
Dependent repositories: 4
Downloads: 7,306 last month
Affected Version Ranges: <= 3.1.1
No known fixed version
All affected versions: 1.0.0, 1.1.0, 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.4.0, 3.0.0, 3.1.0, 3.1.1